Chapter 14: Logging and Light Observability
14.9 Security and hygiene
| Do | Don't |
|---|---|
| Redact tokens/passwords | Log .env contents |
| Separate lab log groups | Mix prod customer PII into lab experiments |
| Set retention intentionally | Keep everything forever "just in case" without a plan |
| Restrict who can read log groups | Public read on sensitive streams |
Ports reminder: if you expose a local Kibana/Grafana-like UI for ELK experiments later, treat it as a shop counter — authenticate and avoid opening to 0.0.0.0/0 casually.